Hi,
You pose a great question, My answer is - Yes.
- The folks before me gave good answers to a point, and I think Flash has an excellent solution, I would ask, if there is a way for PUPPY to shut down the laptop hardrive, but onto my speal:
- Go do some work in (Puppy) an Office doc or spreadsheet, maybe write some emails.
- Reboot to Windows
- Do a search - My Computer - leave the file name open - set date for 1 day - click - Advanced Options and chkmark - system - hidden - subfolders
- I'll bet there are over 24 files showing log and dat extensions, among them will be the USB files and they will be in the logs guaranteed. If fastfind is enabled, the results are even worse.
- The one and only thing WIN does flawlessly is generate a tattletale group of logs, it even places them in a network server for you! - You have to shutdown 70% of the services, change the names of about 40 dll and exe files to stop most of this bahavior, and yet it still will produce over 5 logs as it "barely functions", but the extra 2/3 processor power released makes it unbelievably fast with standard programs ;)
- Now let us consider a document that is used in ms office and Puppy office - there may be changes of Fonts that are logged, of course some of the hidden editing changes can have time an date discrepancy.
- Geany produced documents will have a ms font substitution logged, as well as web pages created in Seamonkey.
- Images processed in both carry embedded info to be snatched and logged.
- Not wanting to belabor the problem by examples, the only sure way is use 2 seperate PCs, not interchanging USB stick. - That said, there are some interesting papers and products that could assist double use.
http://www.nirsoft.net/
- Help with understanding the forensic analysis techniques on a PC
http://truecrypt.org/
- A true on the fly encrption source, with some really deep white papers.
StandAloneApps.com
- I've down loaded a stick with most of these, but have yet to try them.
PortableApps.com
- Have a drive setup with these presently, the Suite opens and seems to operate, some of the other programs, Firefox 3+ will not run on w98 but is ok on xp, some of the other programs do write registry keys.
- Portable apps has a conversion feature for programs you own, I'm thinking of also using it to convert the Sandaloneapps programs, for they don't write registry keys.
Enjoy,
jay